{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "data breach", "trigger": true, "arguments": ["attack pattern", "time", "attacker", "compromised data", "tool", "number of data", "number of victim", "victim", "damage amount"]}, {"event_type": "phishing", "trigger": true, "arguments": ["place", "attacker", "attack pattern", "time", "tool", "trusted entity", "damage amount", "victim", "purpose"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["vulnerable system", "patch", "common vulnerabilities and exposures", "time", "vulnerable system version", "releaser", "vulnerability", "issues addressed", "patch number"]}, {"event_type": "ransom", "trigger": true, "arguments": ["damage amount", "attacker", "tool", "time", "place", "payment method", "victim"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["common vulnerabilities and exposures", "supported platform", "capabilities", "vulnerability", "vulnerable system owner", "vulnerable system"]}], "input": "“ We have typically seen this tag associated with phishing pages that look like Microsoft Office 365 , Apple ID , Dropbox or DocuSign , ” Zscaler wrote ."}
{"data breach": [], "phishing": [{"trigger": "look like", "arguments": {"place": "NAN", "attacker": "NAN", "attack pattern": "NAN", "time": "NAN", "tool": "phishing pages", "trusted entity": ["Apple ID", "DocuSign", "Dropbox", "Microsoft Office 365"], "damage amount": "NAN", "victim": "NAN", "purpose": "NAN"}}], "patch vulnerability": [], "ransom": [], "discover vulnerability": []}